Use the tables for a quick pre-exam check. Expand a topic’s notes for explanations, examples, and additional distinctions.
Scope and study context
For Cisco-style AI scenarios, do not stop at “which model is best.” Also identify:
Business outcome and risk tolerance.
Data type, quality, sensitivity, and ownership.
AI approach: rules, ML, deep learning, generative AI, RAG, or agentic workflow.
Placement: edge, campus, branch, data center, cloud, or hybrid.
Network, security, observability, and operations impact.
Governance, monitoring, rollback, and continuous improvement needs.
Use this independent Cheat Sheet to prepare for the Cisco AI Technical Practitioner (810-110 AITECH) exam from Cisco, official exam code 810-110 AITECH. It is designed for the final review stage: confirming the concepts, decision rules, and common traps you should understand before moving into topic drills, mock exams, and detailed explanations.
This page is not affiliated with Cisco and does not replace Cisco’s official exam information. It focuses on practical exam-prep review: AI fundamentals, data handling, model behavior, generative AI, AI infrastructure, networking considerations, security, governance, and operations.
Use this Cheat Sheet first, then move into IT Mastery practice:
Start with topic drills for AI fundamentals, data, model evaluation, GenAI, infrastructure, security, and operations.
For every missed item, classify the miss:
Concept gap.
Metric or terminology confusion.
Scenario decision error.
Security/governance oversight.
Misread wording.
Read the detailed explanations, not just the correct option.
Rework missed questions after a delay.
Finish with mixed mock exams to practice switching topics under time pressure.
A strong next step is to choose your weakest area from the checklist above and complete a focused set of original practice questions before attempting a full-length mixed review.
AI, ML, and Generative AI Terms
Term
Exam-ready meaning
Common trap
Artificial intelligence
Systems that perform tasks associated with human intelligence, such as perception, reasoning, prediction, or generation
AI is broader than machine learning
Machine learning
AI technique where models learn patterns from data
ML is not always generative
Deep learning
ML using multi-layer neural networks
Requires more data/compute than many classical models
Generative AI
AI that creates text, code, images, audio, or other outputs
Output may be plausible but false
Foundation model
Large model trained on broad data and adaptable to many tasks
Not automatically safe, private, or accurate
Large language model
Foundation model optimized for language tasks
Does not “know” truth; predicts likely tokens
Token
Unit of text processed by a model
Token count affects context, latency, and cost
Context window
Maximum input/output tokens the model can consider in one interaction
Larger context does not guarantee better reasoning
Embedding
Numeric vector representing semantic meaning
Embeddings support similarity search, not exact truth
Vector database/index
Stores and searches embeddings by similarity
Retrieval quality depends on chunks, embeddings, metadata, and ranking
Inference
Using a trained model to produce predictions or outputs
Different from training or fine-tuning
Training
Learning model parameters from data
Usually more expensive and data-intensive than inference
Fine-tuning
Additional training on task/domain examples
Not the default fix for missing facts
Prompt engineering
Designing instructions and context for model output
Prompting cannot fully replace controls and evaluation
RAG
Retrieval-augmented generation; retrieves external content and injects it into prompt context
RAG can still hallucinate if retrieval or grounding is poor
Agentic AI
AI system that plans steps and uses tools/APIs to complete tasks
Tool authorization and auditability are critical
Hallucination
Confident but incorrect or unsupported output
Reduced by grounding, evaluation, and guardrails; not eliminated
Model drift
Degradation as real-world data changes
Requires monitoring and retraining/update strategy
Bias
Systematic unfairness or skew in data/model outputs
Can exist even with high overall accuracy
Explainability
Ability to understand why a model made a decision
More important in regulated, high-risk, or user-impacting decisions
AI Workload Lifecycle
flowchart LR
A[Define business problem] --> B[Identify data sources]
B --> C[Prepare and label data]
C --> D[Choose AI approach]
D --> E[Train, configure, or prompt]
E --> F[Evaluate]
F --> G[Deploy]
G --> H[Monitor]
H --> I[Improve or retire]
I --> B
Notes and examples
Phase
Key questions
Exam focus
Problem framing
Is the goal prediction, classification, generation, search, summarization, automation, or anomaly detection?
Match AI method to outcome
Data sourcing
What data is available, trusted, labeled, current, and permitted for use?
Data quality and governance
Preparation
Clean, normalize, transform, label, split, deduplicate, and protect data
Avoid leakage and bias
Model or approach selection
Rules, classical ML, deep learning, LLM, RAG, fine-tuning, or agent?
Choose the simplest approach that meets requirements
Evaluation
What metric reflects the business risk?
Accuracy is not always enough
Deployment
Where should inference run? What latency, cost, privacy, and connectivity constraints exist?
Edge/data center/cloud tradeoffs
Operations
How will drift, failure, abuse, and infrastructure issues be detected?
MLOps/LLMOps and observability
Choosing the Right AI Approach
Scenario
Prefer
Why
Watch for
Known rules, stable logic, low ambiguity
Rules or automation
Deterministic, auditable, simpler
Do not add ML where rules are enough
Predict a numeric value
Supervised regression
Learns relationship between features and continuous target
Outliers and changing data distributions
Assign item to known category
Supervised classification
Learns from labeled examples
Class imbalance and false positive/negative cost
Discover groups without labels
Clustering
Finds natural groupings
Clusters may not map to business categories
Detect unusual behavior
Anomaly detection
Useful for operations, security, fraud, performance
Needs baseline and tuning
Optimize actions through feedback
Reinforcement learning
Learns policies from rewards
Can be complex and risky in production
Understand images/video
Computer vision / CNNs / vision transformers
Extracts visual patterns
Data labeling and edge compute requirements
Summarize or generate text
LLM / generative AI
Produces natural-language output
Hallucination, privacy, prompt injection
Answer using enterprise documents
RAG
Grounds answers in retrieved content
Poor chunking/retrieval causes wrong answers
Adapt tone, format, or domain behavior
Prompting or fine-tuning
Prompt first; fine-tune when examples are needed
Fine-tuning does not reliably add fresh knowledge
Execute multi-step tasks with tools
Agentic workflow
Plans, calls APIs, and uses memory/tools
Tool permissions, audit logs, and guardrails
Model and Algorithm Selection
Model/technique
Best fit
Strengths
Limitations/traps
Linear regression
Numeric prediction with linear relationships
Simple, explainable, fast
Poor for complex nonlinear patterns
Logistic regression
Binary or multiclass classification
Interpretable baseline
Name says regression but used for classification
Decision tree
Classification/regression with explainability
Easy to visualize
Can overfit
Random forest
General tabular prediction
Reduces overfitting vs single tree
Less interpretable
Gradient boosting
High-performing tabular prediction
Strong accuracy on structured data
Tuning and overfitting risk
k-nearest neighbors
Similarity-based classification/regression
Simple concept
Slow at scale; sensitive to feature scaling
Support vector machine
Classification with clear margins
Effective in some high-dimensional spaces
Less transparent; scaling concerns
k-means
Clustering into predefined number of groups
Fast and common
Must choose k; assumes roughly spherical clusters
DBSCAN
Density-based clustering
Finds irregular clusters and noise
Sensitive to parameters and density variation
Isolation forest
Anomaly detection
Good for outlier discovery
Needs tuning and validation
Neural network
Complex nonlinear patterns
Flexible
Requires more data, compute, and monitoring
CNN
Images/spatial data
Strong visual feature extraction
Training data and compute intensive
RNN/LSTM
Sequential/time-series data
Captures sequence patterns
Often replaced by transformer approaches for many language tasks
Transformer
Language, multimodal, sequence tasks
Parallelizable, strong context modeling
Compute, latency, and governance concerns
LLM
Text generation, summarization, reasoning assistance
Flexible natural-language interface
Probabilistic and may hallucinate
Notes and examples
Model selection quick rules
If the problem asks for…
Likely approach
Notes
Yes/no or category prediction
Supervised classification
Evaluate with precision, recall, F1, ROC-AUC, or PR-AUC.
Numeric prediction
Supervised regression
Evaluate with MAE, RMSE, R-squared, business error tolerance.
Group similar items
Clustering
No labels required; evaluation can be harder.
Find unusual behavior
Anomaly detection
Useful for fraud, security, sensor faults, network anomalies.
Recommend items
Recommendation/ranking
Consider user behavior, feedback loops, fairness, cold start.
Image recognition
Computer vision / CNNs / vision transformers
Data quality and labeling are critical.
Natural language understanding
NLP models or LLMs
Consider embeddings, context, latency, and hallucination risk.
Generate text or code
LLM / GenAI
Use prompts, RAG, guardrails, and evaluation.
Make sequential decisions with rewards
Reinforcement learning
More complex; environment and reward design matter.
Classical ML vs deep learning vs LLMs
Choice
Strengths
Limitations
Best fit
Classical ML
Often explainable, efficient, strong on tabular data.
May need feature engineering; limited for unstructured language/image tasks.
Structured business data, smaller datasets, low-latency needs.
Deep learning
Strong for images, speech, text, complex patterns.
Data-hungry, compute-intensive, harder to explain.
Unstructured data and large-scale pattern recognition.
Chunks too small lose context; too large reduce precision
Labeling
Add target values/classes
Label quality often limits model quality
Train/validation/test split
Separate training, tuning, and final evaluation
Never tune on the test set
Cross-validation
Repeated train/validate cycles
Useful with limited data
Feature engineering
Create useful inputs from raw data
Can introduce data leakage
Deduplication
Remove repeated records
Duplicates across train/test inflate scores
Class balancing
Address rare classes
Accuracy can hide poor minority-class performance
Data masking
Protect sensitive data
Mask before using data in prompts or training when required
Data lifecycle review
AI projects usually fail from poor data, weak evaluation, or operational mismatch before they fail from lack of model sophistication.
flowchart LR
A[Define use case] --> B[Collect and govern data]
B --> C[Clean, label, and validate]
C --> D[Split data]
D --> E[Train or select model]
E --> F[Evaluate]
F --> G[Deploy]
G --> H[Monitor]
H --> I[Retrain or adjust]
I --> C
B --> J[Security, privacy, lineage]
F --> J
G --> J
H --> J
Data concepts to review
Concept
Why it matters
Candidate mistake
Training data
Used to fit the model.
Letting test data influence training decisions.
Validation data
Used for model selection and tuning.
Treating validation results as final unbiased performance.
Test data
Held out for final evaluation.
Reusing the test set repeatedly until it becomes part of tuning.
Labels
Known answers for supervised learning.
Assuming labels exist or are reliable.
Features
Input variables used by the model.
Including leakage features that reveal the target indirectly.
Data leakage
Information from the future or target slips into training.
Getting unrealistically high test scores that fail in production.
Imbalanced data
One class is much more common than another.
Using accuracy when precision/recall is more relevant.
Data drift
Input data distribution changes over time.
Assuming a model remains valid forever.
Concept drift
Relationship between inputs and target changes.
Monitoring only data shape, not outcome quality.
Lineage
Traceability of where data came from and how it changed.
Being unable to explain, audit, or reproduce a model result.
Data splitting trap
A random split is not always appropriate.
Scenario
Better split approach
Time-series forecasting
Train on earlier time periods, validate/test on later periods.
User-level behavior
Split by user/account/entity to avoid leakage.
Medical, finance, or regulated data
Preserve privacy, auditability, and representative sampling.
Cost per task, containment rate, analyst time saved
Outcome value
Executive and operational alignment
Notes and examples
Confusion Matrix Terms
Term
Meaning
Example
True positive
Predicted positive and actually positive
Correctly flagged threat
False positive
Predicted positive but actually negative
Benign activity flagged as threat
True negative
Predicted negative and actually negative
Correctly ignored benign activity
False negative
Predicted negative but actually positive
Missed actual threat
High-yield trap: A model can have high accuracy but poor recall if the positive class is rare.
Generative AI and RAG
RAG Pipeline
flowchart LR
A[Source documents] --> B[Clean and split into chunks]
B --> C[Create embeddings]
C --> D[Store in vector index]
E[User question] --> F[Embed question]
F --> G[Retrieve relevant chunks]
G --> H[Optional rerank/filter]
H --> I[Prompt with context]
I --> J[Generate answer]
J --> K[Evaluate, cite, log]
Records prompts, tool calls, outputs, and approvals
Needed for troubleshooting and accountability
Exam trap: An agent that can call tools is not just a chatbot. It becomes an automation system and must be governed like one.
Cisco-Oriented Architecture Decision Points
In Cisco-focused scenarios, map AI requirements to network, security, observability, collaboration, and data center design. The exam may describe AI in a branch, campus, data center, cloud, security operations, contact center, or network operations context.
Domain
AI use cases
Design priorities
Watch for
Campus/branch
Local inference, smart cameras, user assistance, operational analytics
Validation-like performance no longer matches production.
Exam decision rule:
If inputs changed, think data drift. If the meaning of inputs changed relative to outcomes, think concept drift. If outputs changed, think prediction drift. If measured quality dropped, think performance drift.
Use stratified splitting for imbalanced classification when appropriate.
Do not train on the test set.
For time-series data, split by time rather than random order.
RAG Application Pattern
question="What is the recommended remediation for this alert?"query_vector=embed(question)chunks=vector_index.search(query_vector,top_k=5,filters={"source":"approved"})prompt=build_prompt(question=question,context=chunks,rule="Answer only from context.")answer=llm.generate(prompt,temperature=0)log_interaction(question,chunks,answer)
Retrieval quality is as important as generation quality.
Use metadata filters for source, tenant, sensitivity, and freshness.
Low temperature improves consistency but does not guarantee correctness.
Exam decision rule:
If the question asks for a prediction from labeled historical examples, think supervised ML. If it asks for grouping without labels, think unsupervised learning. If it asks for content generation, summarization, conversation, or transformation, think GenAI/LLM. If it asks for interaction with an environment and rewards, think reinforcement learning.
Evaluation metrics that show up in practice
Classification metrics
Metric
Plain formula
Use when…
Trap
Accuracy
Correct predictions / total predictions
Classes are balanced and all errors have similar cost.
Misleading on imbalanced datasets.
Precision
TP / (TP + FP)
False positives are costly.
High precision can miss many true cases.
Recall / sensitivity
TP / (TP + FN)
False negatives are costly.
High recall may increase false positives.
F1 score
Harmonic mean of precision and recall
Need balance between precision and recall.
Hides the business meaning of each error type.
Specificity
TN / (TN + FP)
Need to measure true negative rate.
Not enough by itself for rare positive classes.
ROC-AUC
Ranking quality across thresholds
General binary classifier comparison.
Can look strong even when rare-event performance is weak.
PR-AUC
Precision-recall tradeoff
Imbalanced positive class.
Harder to interpret without baseline prevalence.
Notes and examples
Regression and forecasting metrics
Metric
What it emphasizes
Trap
MAE
Average absolute error; easy to interpret.
Does not penalize large errors as heavily as RMSE.
RMSE
Larger errors more heavily penalized.
Sensitive to outliers.
R-squared
Proportion of variance explained.
Can look acceptable while business error is too high.
MAPE
Percentage error.
Breaks down or becomes unstable near zero values.
GenAI and LLM evaluation
Evaluation dimension
What to check
Correctness
Is the answer factually right for the context?
Groundedness
Is the answer supported by provided or retrieved sources?
Relevance
Does it answer the user’s actual request?
Safety
Does it avoid harmful, sensitive, or prohibited output?
Robustness
Does it resist prompt injection, ambiguity, and adversarial inputs?
Consistency
Does it provide stable behavior across similar prompts?
Latency
Does it respond quickly enough for the use case?
Cost
Are token, compute, and infrastructure costs sustainable?
Explainability
Can the system provide traceable rationale or citations where needed?
Exam trap: BLEU, ROUGE, or automated similarity metrics may help for some language tasks, but they do not fully prove that an LLM answer is correct, safe, or grounded.
Generative AI and LLM review
Prompt engineering essentials
A strong prompt often includes:
Role or task — what the model should do.
Context — facts, documents, constraints, or user background.
Instructions — steps, rules, and boundaries.
Examples — desired input/output patterns.
Output format — table, JSON, bullets, summary, classification label.
Safety constraints — what not to reveal or perform.
Success criteria — what a good answer should satisfy.
Prompting technique
Use case
Trap
Zero-shot
Direct task with no examples.
May be inconsistent for nuanced outputs.
Few-shot
Provide examples of desired behavior.
Bad examples can anchor bad behavior.
Chain-of-thought style guidance
Encourage structured reasoning or stepwise analysis.
For production, prefer concise rationale or verifiable steps rather than exposing unnecessary internal reasoning.
Structured output
Need parseable JSON, tables, or labels.
Must validate output; models can still produce malformed structures.
System instructions
Set higher-priority behavior and boundaries.
Not a complete security control by itself.
Notes and examples
Tokens, context, temperature, and output control
Concept
Meaning
Practical effect
Token
Unit of text processed by the model.
Drives context size, cost, and latency.
Context window
Maximum tokens the model can consider at once.
Long documents may need chunking or retrieval.
Temperature
Controls randomness.
Lower for deterministic tasks; higher for creative variation.
Top-p
Controls probability mass considered for generation.
Another way to tune output diversity.
Max tokens
Output length limit.
Too low truncates answers; too high increases cost.
Stop sequence
Pattern that ends generation.
Useful for structured outputs or agent boundaries.
RAG, fine-tuning, and prompt-only approaches
Need
Best starting approach
Why
Answer using current private documents
Retrieval-augmented generation
Keeps knowledge external and updateable.
Improve response style or format
Prompting or fine-tuning
Depends on consistency need and volume.
Teach new facts that change often
RAG
Updating an index is easier than retraining.
Specialize behavior across many examples
Fine-tuning
Useful when repeated prompt examples are not enough.
Reduce hallucinations from missing context
RAG plus grounding checks
The model needs access to trusted information.
Build from proprietary domain data at scale
Fine-tuning or custom training
Requires governance, data quality, and infrastructure.
RAG pipeline essentials
Step
Purpose
Common issue
Document ingestion
Bring source content into the system.
Untrusted, stale, or duplicate content.
Chunking
Split documents into retrievable pieces.
Chunks too small lose context; chunks too large reduce precision.
Embedding
Convert text into vectors for similarity search.
Poor embedding model for domain language.
Vector search
Retrieve semantically related chunks.
Retrieves similar but not authoritative content.
Reranking
Improve result ordering.
Adds latency but can improve relevance.
Prompt assembly
Combine user question and retrieved context.
Context overflow or irrelevant context.
Generation
Produce final answer.
Hallucination, overconfidence, missing citations.
Evaluation
Measure correctness and groundedness.
Relying only on user satisfaction.
Decision rule:
Use RAG when the model needs trusted, updateable, external knowledge. Use fine-tuning when the model needs consistent behavior, tone, format, or task adaptation that prompts cannot reliably achieve.
AI infrastructure and networking review
For a Cisco exam, connect AI concepts to technical infrastructure: where data moves, how workloads scale, how systems are secured, and how networks support high-throughput, low-latency operations.
Training vs inference
Dimension
Training
Inference
Goal
Learn model parameters from data.
Use a trained model to produce outputs.
Compute pattern
Heavy, often distributed, accelerator-intensive.
Latency-sensitive, may need autoscaling.
Data flow
Large datasets, checkpoints, repeated reads/writes.
Requests and responses, sometimes retrieval calls.
Network concern
High east-west traffic between nodes; synchronization.
User latency, API throughput, availability.
Storage concern
Dataset access, checkpointing, versioning.
Model loading, cache, retrieval index access.
Optimization
Throughput, utilization, parallelism.
Latency, concurrency, cost per request.
Failure impact
Lost training time, checkpoint recovery.
User-facing outage or degraded service.
Notes and examples
Infrastructure bottlenecks
Symptom
Likely area to investigate
GPUs underutilized during training
Data pipeline, storage throughput, network bottleneck, small batch size.
Exam decision rule:
If the requirement emphasizes real-time response near devices, consider edge inference. If it emphasizes massive training capacity and elasticity, cloud may fit. If it emphasizes data control, compliance, or existing private infrastructure, on-premises or hybrid may be favored.
Security, privacy, and responsible AI
Traditional security still applies
AI systems still need normal enterprise controls:
Strong identity and access management.
Least privilege.
Encryption in transit and at rest.
Network segmentation.
Secure APIs.
Logging and monitoring.
Vulnerability management.
Backup and recovery.
Supply chain control.
Incident response.
Notes and examples
AI-specific risks
Risk
What it means
Mitigation direction
Prompt injection
User or retrieved content attempts to override instructions.
Policy, approved tools, monitoring, user education.
Responsible AI review points
Principle
Practical meaning
Transparency
Users and stakeholders understand AI involvement and limitations.
Accountability
Owners are defined for model behavior, data, and incidents.
Fairness
Systems are tested for harmful bias and unequal impact.
Privacy
Personal and sensitive data is protected throughout the lifecycle.
Safety
Outputs and actions are controlled for harmful outcomes.
Reliability
System behavior is monitored and validated over time.
Explainability
Decisions can be understood at the level required by the use case.
Common trap: Responsible AI is not only a documentation exercise. It affects data selection, model evaluation, deployment controls, user experience, monitoring, and incident response.
Common scenario decisions
Which metric should be prioritized?
Scenario
Better metric focus
Detecting a dangerous condition where missing it is costly
Recall / sensitivity
Alerting analysts where too many false alarms waste time
Precision
Balanced classification with similar error costs
Accuracy may be acceptable
Rare-event detection
Precision, recall, F1, PR-AUC
Numeric forecast with large errors especially harmful
RMSE
Numeric forecast needing easy business interpretation